The Washington State Department of Transportation (WSDOT) is seeking an experienced, qualified firm to conduct annual Payment Card Industry Data Security Standard (PCI-DSS) compliance audits. The selected firm will provide Qualified Security Assessor (QSA) services to ensure WSDOT's compliance with PCI-DSS standards. The contract term is two years, with the option to extend for up to five additional one-year terms. The estimated contract value is approximately $55,000 per year. • The scope of work includes conducting annual PCI-DSS audits, assessing security measures for protecting cardholder data, and providing a Report on Compliance (ROC) and Attestation of Compliance (AOC) to WSDOT's merchant bank. • The selected firm must have experience in providing QSA services and must be certified by the PCI Council. • The contract will be awarded to the highest scoring responsive, responsible bidder. • WSDOT encourages small and diverse businesses to compete for and participate in this procurement.